Problem: Passwords Abruptly Stopped Working

[taylor_smith]

Hullo! I'm having a tricky problem with vBulletin 3.7.

My boss turned off Cloudflare on one of our servers to troubleshoot a problem. Additionally, last night we suddenly started seeing this message:

Database error in vBulletin 3.7.2:
Invalid SQL:
SELECT * FROM ipban 
where ip = ( & ((pow(2,`cidr`) - 1) << (32 - `cidr`))) 
and registration = 0
and (`expires` = 0 OR `expires` > 1329785877) 

ORDER BY cidr DESC;
MySQL Error   : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '& ((pow(2,`cidr`) - 1) << (32 - `cidr`))) 
and registration = 0
and ' at line 2
Error Number  : 1064
Request Date  : Monday, February 20th 2012 @ 04:57:57 PM
Error Date    : Monday, February 20th 2012 @ 04:57:57 PM
Script        : http://vboards.stratics.com/search.php?do=getnew&exclude=63
Referrer      : 
IP Address    : 
Username      : Syrus
Classname     : vB_Database_MySQLi
MySQL Version : 5.0.51a-24+lenny4-log

Eventually, I was able to bring the site back up by deactivating a plugin called "Advanced IP Ban Management." This plugin has been installed for years. No idea why it suddenly borked out. Maybe something to do with Cloudflare?

After disabling the plugin, the site came back up, but now we have a new problem: no passwords work. No users can log in, no admins can log into the ACP, and no moderators can log in to perform moderator actions.

We have a couple of technical people, but they tend to be slow and/or unreliable. Does anyone have any idea what might have gone wrong or how we might fix it?

[kh99]

There's a blank space where the ip address should be in that query, so my guess is that the code was changed to work with cloudflare, so now it doesn't work without it. As for the passwords, I don't know what would cause that but I've seen other people report the same thing a couple of times before. If you figure it out I hope you'll let us know.

When you try to log in do you get the usual "You have entered an invalid username or password.." message? Have you tried the "lost password" link to see if you can reset it?

[Max Taxable]

He "turned off" CloudFlare how? By changing the nameservers back to default and away from the CF assigned ones?

[taylor_smith]

Originally Posted by kh99

There's a blank space where the ip address should be in that query, so my guess is that the code was changed to work with cloudflare, so now it doesn't work without it. As for the passwords, I don't know what would cause that but I've seen other people report the same thing a couple of times before. If you figure it out I hope you'll let us know.

When you try to log in do you get the usual "You have entered an invalid username or password.." message? Have you tried the "lost password" link to see if you can reset it?

Aye, we've tried requesting new passwords. These don't work, either. :<

Originally Posted by Max Taxable

He "turned off" CloudFlare how? By changing the nameservers back to default and away from the CF assigned ones?

I'm not really sure. He didn't give me any heads up--I just run the site. -_-

Our host said that he disabled CloudFlare caching. Does this help?

[Max Taxable]

Originally Posted by taylor_smith

Aye, we've tried requesting new passwords. These don't work, either. :<



I'm not really sure. He didn't give me any heads up--I just run the site. -_-

Our host said that he disabled CloudFlare caching. Does this help?

Not really, since there are a couple of ways to do that, only one of them good.